CVE-2017-1000460 | BDVDB-2026-94708 Detail

Description#

In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized get_bits context, which causes a NULL deref exception.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.ffmpeg.org/pipermail/ffmpeg-cvslog/2017-January/104221.html
https://bugzilla.libav.org/show_bug.cgi?id=952
https://chromium.googlesource.com/chromium/third_party/ffmpeg/+/8e313ca08800178efce00045e07dc494d437b70c
https://lists.debian.org/debian-lts-announce/2019/03/msg00041.html

Exploit#

No public exploit known

History#

Version 12018-01-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.